11761 matches found
python-oslo-middleware: CatchErrors leaks sensitive values into error logs
An information-disclosure flaw was found in oslo.middleware. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs for example, keystone tokens...
The vulnerability of the iOS operating system, which allows a hacker to bypass the sandbox protection mechanism
The vulnerability of the WebSheet component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass the sandbox protection mechanisms using undefined vectors...
The vulnerability of the iOS operating system, which allows a hacker to bypass existing authentication policies
The vulnerability of the Accounts component in the iOS operating system is related to authentication errors. Exploiting this vulnerability allows a malicious actor to circumvent existing authentication policies by exploiting errors in the application uninstallation process...
The vulnerabilities in iOS and Mac OS X operating systems allow attackers to carry out “man-in-the-middle” attacks.
The vulnerability of the IDS-Connectivity component for iOS and Mac OS X is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to carry out a “man-in-the-middle” attack by using notifications regarding network connection changes...
ipa security and bug fix update
4.4.0-14.0.1.el73.6 - Blank out header-logo.png product-name.png Replace login-screen-logo.png 20362818 4.4.0-14.6 - Resolves: 1416488 replication race condition prevents IPA to install - waitforentry: use only DN as parameter - Wait until HTTPS principal entry is replicated to replica - Use prop...
The vulnerability of the Mac OS X operating system allows a hacker to trigger a service failure or increase their privileges.
The vulnerability of the Apple SMC component in the Mac OS X operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to increase their privileges or cause a service failure pointer assignment of zero...
The vulnerability of Google Chrome browser allows a perpetrator to gain access to local files.
The vulnerability of the Histogram component in Google Chrome browser is related to pointer assignment errors. Exploiting this vulnerability can allow a malicious actor to gain access to local files through a specially crafted HTML page...
Apple Mac OS X Multiple Vulnerabilities-05 (Feb 2017)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
python-oslo-middleware: CatchErrors leaks sensitive values into error logs
An information-disclosure flaw was found in oslo.middleware. Software using the CatchError class could include sensitive values in a traceback's error message. System users could exploit this flaw to obtain sensitive information from OpenStack component error logs for example, keystone tokens...
[SECURITY] [DSA 3787-2] tomcat7 regression update
------------------------------------------------------------------------- Debian Security Advisory DSA-3787-2 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 22, 2017 https://www.debian.org/security/faq -...
The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects
The vulnerability in the Linux operating system’s drivers/hid/hid-corsair.c component is related to resource management errors. Exploiting this vulnerability could allow an attacker to cause service failures or other effects such as memory corruption...
The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects
The vulnerability of the Linux operating system’s driver/net/ieee802154/atusb.c component is related to resource management errors. Exploiting this vulnerability can allow an attacker to cause service failures or other effects such as memory corruption to occur locally...
The vulnerability of the Linux operating system, which allows a perpetrator to trigger a service failure or cause other effects
The vulnerability of the freelist-randomization function in the Linux operating system is related to errors in number processing. Exploiting this vulnerability can allow a malicious actor to cause service failures or other adverse effects locally...
The vulnerability of the Android operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Ultimate Edition software for the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through specially crafte...
MariaDB Denial Of Service Vulnerability (Feb 2017) - Linux
MariaDB is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mariadb:mariadb";...
Adobe Digital Editions Multiple Vulnerabilities (Jun 2017) - Mac OS X
Adobe Digital Edition is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:digitaleditions...
Adobe Flash Player <= 24.0.0.194 Multiple Vulnerabilities (APSB17-04)
The version of Adobe Flash Player installed on the remote Windows host is equal or prior to version 24.0.0.194. It is, therefore, affected by multiple vulnerabilities : - Multiple use-after-free errors exist that allow an unauthenticated, remote attacker to execute arbitrary code. CVE-2017-2982,...
The vulnerability of the Flash Player software platform, which allows a violator to bypass the security measures
The vulnerability of the Flash Player software is related to errors in security settings. Exploiting this vulnerability can allow a malicious actor to bypass security measures by manipulating TCP connections...
Vulnerability of the Java Platform software platform, allowing attackers to modify data
The vulnerability of the Java Platform’s networking components is related to security configuration errors. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to modify, add, or delete data using network packets...
The vulnerability of the Java Platform software platform allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of components in the Java Platform software framework is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through network packets...